Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
File: d44TTk_7X7E6woT-lIgnaCYVZjI.mft (raw, json)
Hash identifier: N3y6yaURtatMI/6KzpCdJPzK0hHcK20VTJnY3zyriBQ=
Subject key identifier: 59:A1:4B:51:56:F0:FE:91:ED:EB:93:2D:6C:73:2E:C9:00:D9:BD:AE
Authority key identifier: 77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
Certificate issuer: /CN=778e134e4ffb5fb13ac284fe9488276826156632
Certificate serial: 01A0DFF435D5BD03E6145FF0D5D947EE645E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
Manifest number: 0FCF
Signing time: Sat 26 Sep 2026 23:01:58 +0000
Manifest this update: Sat 26 Sep 2026 23:01:58 +0000
Manifest next update: Sun 27 Sep 2026 23:01:58 +0000
Files and hashes: 1: d44TTk_7X7E6woT-lIgnaCYVZjI.crl (hash: /XFWm2a0SnSKJhgdO3fljxoz3vmbPkrfyhsZ+GeNQmg=)
2: gabLNz-9haR8x0JVvUH9RWZfT3o.roa (hash: elMsH5/2kflaBwBGb1wo4RBVBbTZ4kW2OpPSbwpINts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 23:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:f4:35:d5:bd:03:e6:14:5f:f0:d5:d9:47:ee:64:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778e134e4ffb5fb13ac284fe9488276826156632
Validity
Not Before: Sep 26 23:01:58 2026 GMT
Not After : Sep 27 23:01:58 2026 GMT
Subject: CN=59a14b5156f0fe91edeb932d6c732ec900d9bdae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4e:30:f4:49:bd:9c:6c:8d:ea:d3:53:44:ac:
97:59:a5:b0:81:1e:82:37:18:1a:64:38:21:e8:8a:
1c:c5:76:5c:47:c3:1b:f3:6b:b4:ff:56:9c:14:7f:
ed:31:e1:14:7a:b8:6c:4a:27:38:d5:bd:e0:05:71:
67:a8:7e:99:9d:1b:91:c6:7a:5e:c0:49:8c:84:0d:
24:44:94:54:bb:98:f5:39:a4:84:9d:f0:c2:60:10:
f2:a0:99:24:96:97:c4:b3:ab:25:15:42:f6:5d:39:
a1:af:0e:56:4b:33:f3:8e:46:c2:ff:39:90:1d:24:
9c:62:a2:ff:f9:28:fc:cc:3f:87:44:3f:02:8a:c9:
ef:e3:31:6b:e3:2c:87:61:f3:46:5c:dd:a6:23:0d:
6c:ec:eb:7f:b6:b6:3e:f0:ea:b0:de:26:2d:33:31:
aa:f1:6d:57:e9:ec:d0:ff:19:1b:16:cb:17:4e:61:
ec:94:a9:10:4c:87:2c:29:8e:49:10:3f:d8:0c:da:
45:70:50:4d:4c:8b:04:5d:54:21:da:dd:f2:1c:6a:
9c:e6:e4:ae:b8:71:e4:f7:80:15:3d:46:f4:6b:9e:
8e:fb:45:48:c1:d1:06:ed:47:ff:85:02:a3:8d:b4:
74:18:1d:ec:56:5d:98:61:0c:02:86:b0:6d:48:ab:
78:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A1:4B:51:56:F0:FE:91:ED:EB:93:2D:6C:73:2E:C9:00:D9:BD:AE
X509v3 Authority Key Identifier:
keyid:77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:9a:5e:4f:3d:06:bb:5e:41:7b:3f:7f:99:7b:e9:d4:ad:a3:
bc:a6:8d:59:61:80:6e:dd:dc:b4:e2:4d:6a:10:3a:4f:d7:c0:
25:95:b6:44:f7:fa:2c:b6:b5:4e:bc:de:6a:ec:77:c0:15:4c:
d1:51:38:70:80:b6:a4:f6:bd:cc:de:8e:15:f7:eb:c7:16:52:
ac:e8:ee:28:43:85:f7:6a:5a:29:3f:fc:6f:24:10:e3:0e:c1:
57:db:2b:cc:76:10:68:a0:4c:45:e8:c3:96:ae:f3:eb:c8:2c:
a8:af:8b:a5:2a:fc:c7:32:c8:f0:29:59:bf:72:5f:69:65:91:
02:f8:95:9a:4a:70:32:17:9b:10:e0:bb:77:c9:9f:3d:46:2b:
0d:f7:e9:3b:df:9e:39:28:e4:50:fc:2d:cc:56:48:26:ab:00:
5a:5d:58:a8:a6:e5:b1:63:1e:f9:80:1a:04:e1:54:ad:24:0d:
0b:d5:a1:8f:ee:6a:12:85:fb:88:6e:6e:a8:61:5e:d4:2b:b3:
30:cf:c9:db:d6:68:c8:a9:f7:1d:f1:5f:4f:e1:f7:33:a7:bb:
5a:29:26:1e:46:5a:62:9c:42:0d:7b:5a:9c:17:0c:58:09:2a:
ba:4b:e9:27:4e:c9:37:c6:a1:c4:b8:6a:4f:16:81:50:ca:0d:
76:3b:bf:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:37:41 2026 by rpki-client